fsanz.com

Issued by R3

About this certificate

This digital certificate with serial number 04:58:28:ad:4c:99:46:29:2b:e3:7f:e7:68:83:49:54:64:8f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fsanz.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:58:28:ad:4c:99:46:29:2b:e3:7f:e7:68:83:49:54:64:8f
Serial Number (int): 378448060956878246997482331867014969451663
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ba:0d:d3:2f:f4:3d:9e:dc:c5:94:b1:1f:39:bd:30:91:41:f0:f2:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9d:07:6b:38:0c:1f:91:e0:54:1d:20:1e:90:41:5c:f2:3f:2f:f5:61
Fingerprint (sha256): 11:2f:02:83:e3:d4:c6:ac:37:ad:60:2d:99:34:d5:8a:5d:49:74:78:1f:22:55:06:48:e8:bf:0b:57:f5:e5:ed

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fsanz.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fsanz.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fsanz.com

Other certificates including the domain name fsanz.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for fsanz.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378448060956878246997482331867014969451663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 06:43:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 06:43:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fsanz.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718683427495120277996138662502785370342463435345041758665732123997703432849765210792877523862585261289862606284359712551459089747922601476483052359677476520928817373032501222548999749617555098401039165195925805292846233020378366549349430633659960282179543651695244685276051216575799378708982931536263618740860702921048167428156855298201911799232515269650759091417087552799524918013316448131409876324765180778654316431530268701382333426676997211959306235013746596586304293744358028559212790043839754685721013021395023598980085536457112609432460741991286809184480334058714250188271008483176969588407453199233406199348748000696096223592361136994434506517003349727525737895223944218410878436598964567042435448995214586792020895875303168539130928658370541348357877575404393219410054070280202543851834758655649986327769623145493160017429454291651598427542192237959396548038589259507479654500696451192685440566254930849303808873225761578756476883071159835848084387926290102187728919534607213057453196470376832170642415348053978028171884537516184960255780751826944569200988972819610727656961422501406044091161096315586015234634507550119476743542698115754751725978520007351410559077314900963081074115000594112696111313571912213833177510014437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba0dd32ff43d9edcc594b11f39bd309141f0f2f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsanz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1b8634c100000403004830460221008e18cd8f11ec835a00097bcfb1bfebcecbdedc1b5414fad2f8a2a45afebf4e09022100a78de4344fa708f659c46aec608cd3ecd4677dd3217d140ae0919a22a54675e000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d1b86358500000403004630440220225486eea1936ee597657433a81ed17206b8e8179cdf8aa7c89625383f7c8bbe02203886dcc0fff4684390aba7d11a59d1c91bf517053d6bc8eaba10eb6f953d4177
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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